------------[ cut here ]------------ WARNING: CPU: 1 PID: 15360 at fs/kernfs/dir.c:36 kernfs_active+0xe8/0x120 fs/kernfs/dir.c:38 Modules linked in: CPU: 1 PID: 15360 Comm: syz-executor.1 Not tainted 6.1.0-rc4-syzkaller-00159-g4bbf3422df78 #0 Hardware name: linux,dummy-virt (DT) pstate: 10000005 (nzcV daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : kernfs_active+0xe8/0x120 fs/kernfs/dir.c:36 lr : lock_is_held include/linux/lockdep.h:283 [inline] lr : kernfs_active+0x94/0x120 fs/kernfs/dir.c:36 sp : ffff8000122e7a00 x29: ffff8000122e7a00 x28: 0000000000000002 x27: 0000000000000001 x26: ffff000015748628 x25: 1fffe00002ae90c5 x24: 0000000000000000 x23: ffff80000ca90e60 x22: ffff800008a06590 x21: 0000000000000001 x20: ffff00000911a1d0 x19: ffff00000911a1d0 x18: 0000000000000000 x17: ffff80000804417c x16: ffff800008a074e0 x15: 00000000200003c8 x14: 1ffff0000245cf0e x13: 1fffe00002295811 x12: ffff70000245cf39 x11: 1ffff0000245cf38 x10: ffff70000245cf38 x9 : dfff800000000000 x8 : ffff80000f2b6920 x7 : ffff0000091a4058 x6 : ffff80000f2b6660 x5 : ffff000009402ee8 x4 : 1ffff00001bcbf6e x3 : 1fffe000022956d1 x2 : 0000000000000003 x1 : 00000000000000c0 x0 : 0000000000000000 Call trace: kernfs_active+0xe8/0x120 fs/kernfs/dir.c:38 kernfs_find_and_get_node_by_id+0x6c/0x140 fs/kernfs/dir.c:708 __kernfs_fh_to_dentry fs/kernfs/mount.c:102 [inline] kernfs_fh_to_dentry+0x88/0x1fc fs/kernfs/mount.c:128 exportfs_decode_fh_raw+0x104/0x560 fs/exportfs/expfs.c:435 exportfs_decode_fh+0x10/0x5c fs/exportfs/expfs.c:575 do_handle_to_path fs/fhandle.c:152 [inline] handle_to_path fs/fhandle.c:207 [inline] do_handle_open+0x2a4/0x7b0 fs/fhandle.c:223 __do_compat_sys_open_by_handle_at fs/fhandle.c:277 [inline] __se_compat_sys_open_by_handle_at fs/fhandle.c:274 [inline] __arm64_compat_sys_open_by_handle_at+0x6c/0x9c fs/fhandle.c:274 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x260 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x254 arch/arm64/kernel/syscall.c:142 do_el0_svc_compat+0x40/0x70 arch/arm64/kernel/syscall.c:212 el0_svc_compat+0x54/0x140 arch/arm64/kernel/entry-common.c:773 el0t_32_sync_handler+0x90/0x140 arch/arm64/kernel/entry-common.c:783 el0t_32_sync+0x190/0x194 arch/arm64/kernel/entry.S:586 irq event stamp: 172 hardirqs last enabled at (171): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (171): [] _raw_spin_unlock_irqrestore+0x90/0xc0 kernel/locking/spinlock.c:194 hardirqs last disabled at (172): [] el1_dbg+0x24/0xa0 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (162): [] _stext+0x9d4/0x107c softirqs last disabled at (149): [] ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79 ---[ end trace 0000000000000000 ]---